Friday, April 30, 2010

Google Docs wireframe

I've been playing around with the newest addition to Google Docs, Google Drawings, and I'm quite liking it. I tried drawing a few diagrams and even a wireframe, and it turns out the basic drawing interactions are just as good – in some cases even better – than what I'm used to in Omnigraffle and Fireworks.

5 reasons Google Drawings beats Viso and Omnigraffle

We know the cloud computing arguments, and they certainly apply to wireframes

  1. It's live. The entire team can work on the same document and see each other's work instantly
  2. The wireframes live in the cloud, no sending files around, no outdated documents
  3. The risk of losing data is zero. It saves for every edit you make
  4. It's free
  5. Most people already have a Google account, so no sign up required

We need stencils

One thing was missing though: Stencils. Omnigraffle has stencils coming out of its ears, and Fireworks has some excellent built-in ones. But Google Drawings in its current early and simple form simply doesn't have it. So I made one.

Leaving the stencils in the gutter

An interesting limitation is the fact that

  • there's no stencil library function and
  • you can't easily copy and paste from one document to another.

One solution, it seems, is to clone one of the wireframe kits and thereby also cloning the stencils into each document. To not print or export the stencils, I've left them in the gutter area of the document. Seems to work quite okay.

Kind of blue

I've been wanting a blue kit since I left a project years ago where we used blue stencils (the idea was Peter's). As you may have experienced, some customers simply don't understand wireframes. The blue color gives that well-known blueprint feel, and shouldn't prompt questions like "I like it, doesn't it need a splash of colour?"

The templates

To make it even easier for you (ehm, me) I've begun making simple starting point templates.

Main blank template

Product detail page

Landing page

Item list view

They're all in this shared folder on Google Docs, and it will be updated when there are new templates. If you make one, let me know and I'll add it to the folder so everyone can use it.

Wednesday, April 7, 2010

blue diamond auction in Hong Kong today April 7

Sotheby's will auction next month a rare, large blue diamond that was once part of the legendary De Beers Millennium collection, with fierce bidding expected on the $4.6-$5.8 million estimate price.

The 5.16 carat, pear-shaped internally flawless Fancy Vivid Blue gem is the first diamond of its kind to appear at an auction from the collection that De Beers, the world's largest diamond producer, presented in 2000 to celebrate the millennium.

It is being put up for sale by a private collector and is the star lot at Sotheby's Hong Kong jewels and jadeite 2010 spring sale on April 7.

The auction's location is not surprising: China is one of the world's largest and fastest growing diamond markets, with jewellers forecasting it will be the next big purchaser of rare jewels as its economy surges as the rest of the world still grapples with the fallout from the global financial meltdown.

Blue diamonds are among the rarest of all gems and owe their natural blue colour to the presence of the chemical element boron during the stone's formation.

In May 2009, a 7.03-carat cushion-shaped internally flawless fancy vivid blue diamond set the world record price per carat for any gemstone at a Sotheby's Geneva auction when it was bought by a Hong Kong collector for $9.48 million dollars.

source

Wednesday, February 10, 2010

The Badshahi Mosque : بادشاھی مسجد)



The Badshahi Mosque (Urdu: بادشاھی مسجد), or the 'King's Mosque', in Lahore is the second largest mosque in Pakistan and South Asia and the fifth largest mosque in the world. It is Lahore's most famous landmark and a major tourist attraction epitomising the beauty, passion and grandeur of the Mughal era.

Capable of accommodating 10,000 worshippers in its main prayer hall and 100,000 in its courtyard and porticoes, it remained the largest mosque in the world from 1673 to 1986 (a period of 313 years), when overtaken in size by the completion of the Faisal Mosque in Islamabad. Today, it remains the second largest mosque in Pakistan and South Asia and the fifth largest mosque in the world after the Masjid al-Haram (Grand Mosque) of Mecca, the Al-Masjid al-Nabawi (Prophet's Mosque) in Medina, the Hassan II Mosque in Casablanca and the Faisal Mosque in Islamabad.

www.uptomark.com

Mazar-e-Quaid : مزار قائد)


Mazar-e-Quaid (Urdu: مزار قائد) or the National Mausoleum refers to the tomb of the founder of Pakistan, Muhammad Ali Jinnah. It is an iconic symbol of Karachi throughout the world. The mausoleum (Urdu/Persian/Arabic: mazār), completed in the 1960s, is situated at the heart of the city.

Thursday, December 17, 2009

PHP Security Blunders

these are the some blunders where mostly developers done during coding
Unvalidated Input Errors

One of -- if not the -- most common PHP security flaws is the unvalidated input error. User-provided data simply cannot be trusted. You should assume every one of your Web application users is malicious, since it's certain that some of them will be. Unvalidated or improperly validated input is the root cause of many of the exploits we'll discuss later in this article.
is code has a gaping security hole, since the $_GET[month] and $_GET[year] variables are not validated in any way. The application works perfectly, as long as the specified month is a number between 1 and 12, and the year is provided as a proper four-digit year. However, a malicious user might append ";ls -la" to the year value and thereby see a listing of your Website's html directory. An extremely malicious user could append ";rm -rf *" to the year value and delete your entire Website!
$month = $_GET['month'];
$year = $_GET['year'];

if (!preg_match("/^[0-9]{1,2}$/", $month)) die("Bad month, please re-enter.");
if (!preg_match("/^[0-9]{4}$/", $year)) die("Bad year, please re-enter.");

exec("cal $month $year", $result);
print "";
foreach ($result as $r) { print "$r
"; }
print "";
For my PHP applications, I prefer a directory structure based on the sample below. All function libraries, classes and configuration files are stored in the includes directory. Always name these include files with a .php extension, so that even if all your protection is bypassed, the Web server will parse the PHP code, and will not display it to the user. The www and admin directories are the only directories whose files can be accessed directly by a URL; the admin directory is protected by an .htaccess file that allows users entry only if they know a user name and password that's stored in the .htpasswd file in the root directory of the site.

/home
/httpd
/www.example.com
.htpasswd
/includes
cart.class.php
config.php
/logs
access_log
error_log
/www
index.php
/admin
.htaccess
index.php

Cross Site Scripting (XSS) Flaws

Cross site scripting, or XSS, flaws are a subset of user validation where a malicious user embeds scripting commands -- usually JavaScript -- in data that is displayed and therefore executed by another user.

For example, if your application included a forum in which people could post messages to be read by other users, a malicious user could embed a

SQL Injection Vulnerabilities

SQL injection vulnerabilities are yet another class of input validation flaws. Specifically, they allow for the exploitation of a database query. For example, in your PHP script, you might ask the user for a user ID and password, then check for the user by passing the database a query and checking the result.

SELECT * FROM users WHERE name='$username' AND pass='$password';

However, if the user who's logging in is devious, he may enter the following as his password:

' OR '1'='1

This results in the query being sent to the database as:

SELECT * FROM users WHERE name='known_user' AND pass='' OR '1'='1';

This will return the username without validating the password -- the malicious user has gained entry to your application as a user of his choice. To alleviate this problem, you need to escape dangerous characters from the user-submitted values, most particularly the single quotes ('). The simplest way to do this is to use PHP's addslashes() function.

if (get_magic_quotes_gpc()){
$_GET = array_map('stripslashes', $_GET);
$_POST = array_map('stripslashes', $_POST);
$_COOKIE = array_map('stripslashes', $_COOKIE);
}

in reference to:

"if (get_magic_quotes_gpc()){    $_GET = array_map('stripslashes', $_GET);    $_POST = array_map('stripslashes', $_POST);    $_COOKIE = array_map('stripslashes', $_COOKIE);   }"
- Top 7 PHP Security Blunders [PHP & MySQL Tutorials] (view on Google Sidewiki)

FREE PANDA CLOUD ANTIVIRUS 2010 DOWNLOAD QUICKLY

Now here, We have written a New post on “ Best Free Antivirus Softwares” and in that we added Panda Cloud Antivirus beta edition. We also covered it in a separate post here. Now Panda Cloud Antivirus 1.o Final edition has been released after 6 months of beta testing.
In version 1.0 Panda Cloud Antivirus developers have improved most of the issues submitted during the testing period. Some of the improvements it incorporates are:


Click here to Download Panda Cloud Antivirus 1.0 Final release

Thursday, December 3, 2009

Email Etiquettes

‘Netiquettes’ is the name given to the email etiquettes by the cyber gurus, which means the etiquettes of communication via Internet. Although netiquettes concerns all the various customs and conventions we follow when writing and sending messages through Internet, but in this article we will particularly discuss the emailing etiquettes of both the current employees and the job seekers.

People normally adopt email etiquettes by observing what others do, and gradually incorporate their actions into our own communications. We expect that after reading this article you would be able to develop your own style of writing an effective email.

in reference to:

"‘Netiquettes’ is the name given to the email etiquettes by the cyber gurus, which means the etiquettes of communication via Internet. Although netiquettes concerns all the various customs and conventions we follow when writing and sending messages through Internet, but in this article we will particularly discuss the emailing etiquettes of both the current employees and the job seekers. People normally adopt email etiquettes by observing what others do, and gradually incorporate their actions into our own communications. We expect that after reading this article you would be able to develop your own style of writing an effective email."
- Email Etiquettes – An Important Aspect of Professional Communication | Rozee Weblog (view on Google Sidewiki)